This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): update actions/setup-node digest to 969bd26

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update all non-major dependencies (@prisma/client, @types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, discord.js, dotenv, eslint, prisma, typescript)
• chore(deps): update dependency @sapphire/plugin-subcommands to v3
• chore(deps): update dependency discord.js to v14
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

github-actions

.github/workflows/tests.yml

• actions/checkout v3@2541b1294d2704b0964813337f33b291d3f8596b
• actions/setup-node v3@2fddd8803e2f5c9604345a0b591c3020ee971a93
• actions/checkout v3@2541b1294d2704b0964813337f33b291d3f8596b
• actions/setup-node v3@2fddd8803e2f5c9604345a0b591c3020ee971a93

npm

package.json

• @daangamesdg/sapphire-logger ^1.0.5
• @prisma/client ^4.3.1
• @sapphire/decorators ^5.0.0
• @sapphire/plugin-subcommands ^2.2.2
• @sapphire/type ^2.2.4
• discord.js ^13.10.3
• dotenv ^16.0.2
• ms ^2.1.3
• typescript ^4.8.3
• @commitlint/cli ^17.1.2
• @commitlint/config-angular ^17.1.0
• @sapphire/eslint-config ^4.3.8
• @sapphire/prettier-config ^1.4.4
• @sapphire/ts-config ^3.3.4
• @types/ms ^0.7.31
• @types/node ^16.11.58
• @typescript-eslint/eslint-plugin ^5.36.2
• @typescript-eslint/parser ^5.36.2
• cross-env ^7.0.3
• eslint ^8.23.0
• eslint-config-prettier ^8.5.0
• eslint-plugin-prettier ^4.2.1
• husky ^8.0.1
• lint-staged ^13.0.3
• prisma ^4.3.1
• yarn 3.2.3

---

• Check this box to trigger a request for Renovate to run again on this repository

Vulnerabilities

DepShield reports that this application's usage of lodash.clonedeep:4.5.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.clonedeep:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• eslint:7.32.0
        └─ table:6.7.2
              └─ lodash.clonedeep:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.isequal:4.5.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

lodash.isequal:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• discord.js:13.2.0
        └─ @discordjs/builders:0.6.0
              └─ ow:0.27.0
                    └─ lodash.isequal:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}